VDB
CVE-2006-5174
CVE-2006-5174
PUBLISHED
Reported by mitre · Published October 5, 2006
The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Oct 5, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- [linux-kernel] 20061105 Linux 2.6.16.31-rc1 mailing-listx_refsource_MLIST
- oval:org.mitre.oval:def:9885 vdb-entrysignaturex_refsource_OVAL
- SUSE-SA:2006:079 vendor-advisoryx_refsource_SUSE
- kernel-copyfromuser-information-disclosure(29378) vdb-entryx_refsource_XF
- 20379 vdb-entryx_refsource_BID
- RHSA-2007:0014 vendor-advisoryx_refsource_REDHAT
- ADV-2006-3938 vdb-entryx_refsource_VUPEN
- x_refsource_CONFIRM
- DSA-1237 vendor-advisoryx_refsource_DEBIAN
- 24206 third-party-advisoryx_refsource_SECUNIA
- 1017090 vdb-entryx_refsource_SECTRACK
- 23474 third-party-advisoryx_refsource_SECUNIA
- 23064 third-party-advisoryx_refsource_SECUNIA
- DSA-1233 vendor-advisoryx_refsource_DEBIAN
- 23370 third-party-advisoryx_refsource_SECUNIA
- 23997 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- 22497 third-party-advisoryx_refsource_SECUNIA
- RHSA-2006:0710 vendor-advisoryx_refsource_REDHAT
…and 2 more